$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: OtB1fFFdAXXMThXD1ILu0Ea3MD6mL5nat+qKdhg+PzI= Subject key identifier: 09:05:F7:58:E1:7B:3C:B7:15:89:25:9B:AB:A5:A2:4F:56:B5:01:FE Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 28BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 27F5 Signing time: Thu 24 Apr 2025 15:40:56 +0000 Manifest this update: Thu 24 Apr 2025 15:40:56 +0000 Manifest next update: Thu 01 May 2025 15:40:56 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: twJb7EnSDUSwNABh/UGuy4M7G/hI3frkUvIcdto1u8c=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: TklClzxx9K18o0RPLn1yMvXuXYYSv/q9QF8TfgX5y9s=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: 2xWbrnHwz3OQ4/YSi1KDjiY+Btu6Pg+aM5b286IQ9MU=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: uKiFFY8vpTe1cBpydcM6MoqXZ6WNPxhGwHMFnSCc+M4=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: Jc7neVqmiIdnrebi7TQ+tno2juV2xxAmmlOymTBrBWE=) 6: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: v3Cc5tKTf2iIByiBtMh2ub3e/Z8wxVHlA4ixpFZXtF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10431 (0x28bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Apr 24 15:40:56 2025 GMT Not After : May 1 15:40:56 2025 GMT Subject: CN=680a5b88-d590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:af:43:fc:7c:74:9c:a4:84:e9:34:17:f0: f0:8c:79:14:aa:e7:27:c9:cf:03:ee:44:7d:23:79: 3e:4d:7e:88:93:4b:97:d2:f4:f0:27:7d:25:91:8a: 22:c8:cd:1e:47:20:00:b6:fa:cf:da:6d:51:ed:7c: 05:ee:1e:d6:3e:52:ea:bb:f6:32:60:cd:39:2f:12: 22:3f:20:8b:08:64:68:8b:7f:6f:3f:99:7a:e2:81: 01:d1:98:1d:74:c2:13:84:74:6f:38:76:c1:b0:68: 24:ad:05:80:bb:2a:36:01:d7:c4:b8:f4:6a:4f:94: c4:20:03:0e:91:9e:fd:36:e6:93:2a:4d:20:dc:de: 2a:27:aa:d0:53:6f:1f:fc:2f:62:1d:ad:83:42:5e: fb:a8:fb:8c:17:26:4b:52:95:04:3d:27:16:6c:f6: b2:b5:9a:fb:9b:51:14:93:d9:84:44:cd:b0:c8:e9: f2:46:34:d0:c2:f5:d5:3a:80:79:86:77:b6:92:c0: 4b:7e:44:d2:1b:c7:f5:7c:86:03:b8:01:a2:b5:58: 10:a6:30:34:16:39:25:84:45:9b:30:84:b1:d0:8c: 65:db:a1:92:82:8c:3f:35:19:1d:e6:aa:92:03:2e: 88:fb:8c:91:4e:ae:a2:55:5f:72:b9:ef:b2:a7:e9: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:05:F7:58:E1:7B:3C:B7:15:89:25:9B:AB:A5:A2:4F:56:B5:01:FE X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:89:0d:a5:57:07:eb:99:a8:35:e0:71:e6:6f:af:67:27:8b: 0c:42:ba:a5:bb:7a:8d:35:5f:30:29:7e:c7:81:af:28:ff:17: 03:48:49:dc:20:ca:6e:9e:0f:71:15:28:ce:68:43:94:c9:e8: 65:03:b7:6a:b2:0e:bc:fa:ff:b0:24:86:be:34:4d:f5:c4:74: 6f:90:48:43:a6:6b:93:e3:fd:41:16:a5:0f:7e:8a:63:50:f4: bc:41:bf:b4:35:0f:89:83:e5:55:d4:55:d1:e9:fc:e7:6e:e2: 5d:fd:67:03:64:76:73:8b:b8:48:1f:3f:cd:3c:aa:88:69:7c: 91:95:2f:97:e7:ab:e4:da:5d:64:7b:cd:72:45:4c:7f:f4:ad: 11:9e:f8:6a:d2:93:60:52:29:d3:28:90:02:34:2a:8c:03:c0: 14:e7:18:f1:6f:0b:e5:f6:f7:69:f4:18:f6:14:ef:11:8b:00: c8:d3:7d:cc:0a:a1:d8:01:19:02:9a:3c:c8:c4:22:53:8b:3c: a3:da:e9:a9:b1:a6:54:7d:91:1b:7d:45:0d:05:73:35:08:ba: 07:54:e5:9d:8c:96:e8:c6:9f:f4:9f:39:40:d8:54:90:39:8c: 6a:86:1e:b5:b2:17:c3:fb:28:ac:26:a0:a4:83:90:60:17:fe: bd:ae:3f:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjUwNDI0MTU0MDU2WhcNMjUwNTAxMTU0MDU2WjAYMRYwFAYD VQQDEw02ODBhNWI4OC1kNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGqvQ/x8dJykhOk0F/DwjHkUqucnyc8D7kR9I3k+TX6Ik0uX0vTwJ30lkYoi yM0eRyAAtvrP2m1R7XwF7h7WPlLqu/YyYM05LxIiPyCLCGRoi39vP5l64oEB0Zgd dMIThHRvOHbBsGgkrQWAuyo2AdfEuPRqT5TEIAMOkZ79NuaTKk0g3N4qJ6rQU28f /C9iHa2DQl77qPuMFyZLUpUEPScWbPaytZr7m1EUk9mERM2wyOnyRjTQwvXVOoB5 hne2ksBLfkTSG8f1fIYDuAGitVgQpjA0FjklhEWbMISx0Ixl26GSgow/NRkd5qqS Ay6I+4yRTq6iVV9yue+yp+nEawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkF91jh ezy3FYklm6ulok9WtQH+MB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIiQ2lVwfrmag14HHmb69nJ4sMQrqlu3qNNV8wKX7Hga8o/xcDSEnc IMpung9xFSjOaEOUyehlA7dqsg68+v+wJIa+NE31xHRvkEhDpmuT4/1BFqUPfopj UPS8Qb+0NQ+Jg+VV1FXR6fznbuJd/WcDZHZzi7hIHz/NPKqIaXyRlS+X56vk2l1k e81yRUx/9K0Rnvhq0pNgUinTKJACNCqMA8AU5xjxbwvl9vdp9Bj2FO8RiwDI033M CqHYARkCmjzIxCJTizyj2umpsaZUfZEbfUUNBXM1CLoHVOWdjJboxp/0nzlA2FSQ OYxqhh61shfD+yisJqCkg5BgF/69rj/l -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:20 2025 by rpki-client